Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa
File: a2880666-4566-3c6f-8c7d-496e76f824a3.roa (raw, json)
Hash identifier: Uu6RbYHVWtQha4WHEpGloKwA2eMJgHFGWrza2UFRcSQ=
Subject key identifier: 1C:23:25:14:85:CB:CA:55:3C:41:76:AA:4B:7E:1D:7D:50:27:0C:7D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21131CE03C241BEAF1715C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 393238
IP address blocks: 64.199.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:31:ce:03:c2:41:be:af:17:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=ac51259a-870f-49a3-84ec-5063d23e947e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b8:d7:15:3c:08:ec:d3:f3:ac:7d:30:4e:6b:
dd:05:af:4d:77:94:f9:8d:61:6c:f9:dd:af:e4:9d:
f6:e6:4d:aa:80:4d:cc:c4:c0:86:69:73:1c:f1:89:
c4:fd:ba:38:fa:54:7c:5b:c3:b5:b2:0e:8d:91:13:
fe:2e:1b:be:9c:96:98:7f:22:b7:57:35:6f:9d:8c:
7c:8b:1d:f8:28:33:4d:06:1d:a0:ef:d2:74:8d:af:
14:27:b7:af:50:14:6a:ba:7b:af:c5:11:7d:a0:20:
f8:24:49:b5:53:70:ff:20:fb:f1:d2:3d:72:7f:d8:
4a:c0:bc:e8:3c:01:20:91:68:0e:d2:41:e0:84:d1:
81:ba:60:77:38:bb:3d:e8:ef:31:e1:e5:85:84:30:
d0:39:3f:c4:4e:e9:ee:ab:95:6c:73:8e:46:88:4b:
e6:56:b6:72:98:11:6c:69:11:b7:a2:de:53:48:ed:
47:c9:f4:39:76:83:01:57:2f:a2:3a:b8:ba:a8:40:
d6:b3:1c:96:ad:3e:19:3e:fe:30:de:d2:27:07:49:
57:92:83:7a:82:8b:cd:d8:a9:a4:83:15:77:1f:be:
8c:cb:64:9d:d9:95:ff:1c:49:87:ab:e7:8e:fb:61:
9d:1d:bc:8b:75:7b:54:99:d3:b9:78:91:44:60:15:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:25:14:85:CB:CA:55:3C:41:76:AA:4B:7E:1D:7D:50:27:0C:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.199.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:20:ab:c0:ca:1e:ac:99:c7:98:b7:14:7b:16:69:2a:e0:4e:
bc:99:73:63:db:89:73:ec:bb:e7:8a:1b:5b:67:0f:b8:14:cd:
69:1f:3c:f8:df:3a:f8:f8:9c:22:36:42:3f:9b:da:c1:67:38:
20:b2:a2:ab:e0:38:90:11:ac:c4:a0:06:e2:33:30:ce:81:ad:
9a:c6:8b:c0:38:a8:2d:30:ef:2e:a9:ce:ea:97:21:2b:95:df:
3f:4f:ac:40:fb:20:4d:81:3e:72:c8:58:6f:a1:b3:e4:8f:aa:
37:0a:c7:91:4b:68:d2:19:d2:08:ef:16:a1:3e:16:dd:ce:d9:
51:82:98:c5:c5:04:b5:0a:53:b9:c6:d1:09:e0:1d:6c:3e:86:
59:d7:0b:6c:67:41:8e:e1:7d:2a:cd:f9:4e:1f:fd:c1:55:82:
55:8a:88:64:03:ab:b1:93:bf:96:cc:89:0f:56:a7:db:04:9f:
40:39:22:74:60:f7:ac:ce:7e:a5:4b:04:25:7b:de:8a:f6:9c:
84:ec:cd:e2:f9:99:9c:68:65:bf:3c:71:23:90:c7:b0:b7:66:
db:8e:fc:99:33:1a:07:6a:82:3e:bc:7d:a4:b9:5f:16:c6:b8:
b9:54:b0:9d:3f:c3:69:93:8a:fc:f8:89:19:b7:60:a2:db:6a:
cc:ec:93:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETHOA8JBvq8XFcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
YWM1MTI1OWEtODcwZi00OWEzLTg0ZWMtNTA2M2QyM2U5NDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibjXFTwI7NPzrH0wTmvdBa9Nd5T5jWFs+d2v
5J325k2qgE3MxMCGaXMc8YnE/bo4+lR8W8O1sg6NkRP+Lhu+nJaYfyK3VzVvnYx8
ix34KDNNBh2g79J0ja8UJ7evUBRqunuvxRF9oCD4JEm1U3D/IPvx0j1yf9hKwLzo
PAEgkWgO0kHghNGBumB3OLs96O8x4eWFhDDQOT/ETunuq5Vsc45GiEvmVrZymBFs
aRG3ot5TSO1HyfQ5doMBVy+iOri6qEDWsxyWrT4ZPv4w3tInB0lXkoN6govN2Kmk
gxV3H76My2Sd2ZX/HEmHq+eO+2GdHbyLdXtUmdO5eJFEYBVF4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBwjJRSFy8pVPEF2qkt+HX1QJwx9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI4ODA2NjYtNDU2Ni0z
YzZmLThjN2QtNDk2ZTc2ZjgyNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQMf+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkgq8DKHqyZx5i3FHsWaSrgTryZc2PbiXPsu+eKG1tnD7gUzWkfPPjf
Ovj4nCI2Qj+b2sFnOCCyoqvgOJARrMSgBuIzMM6BrZrGi8A4qC0w7y6pzuqXISuV
3z9PrED7IE2BPnLIWG+hs+SPqjcKx5FLaNIZ0gjvFqE+Ft3O2VGCmMXFBLUKU7nG
0QngHWw+hlnXC2xnQY7hfSrN+U4f/cFVglWKiGQDq7GTv5bMiQ9Wp9sEn0A5InRg
96zOfqVLBCV73or2nITszeL5mZxoZb88cSOQx7C3ZtuO/JkzGgdqgj68faS5XxbG
uLlUsJ0/w2mTivz4iRm3YKLbaszsk4w=
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:07 2025 by rpki-client